This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json) Hash identifier: Tw60AXdt7iZtaj/ncoQmlhnDE9CuQ87an1lqjYG9u8E= Subject key identifier: 2C:DD:F3:00:19:BF:F4:24:FE:DE:60:59:DF:89:23:E4:39:3C:FD:6D Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF Certificate serial: 3C00D434EC192C3B657BB5AD6EA8B5B8AE90A3F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft Manifest number: 068A Signing time: Sun 01 Feb 2026 11:41:56 +0000 Manifest this update: Sun 01 Feb 2026 11:36:56 +0000 Manifest next update: Wed 04 Feb 2026 13:06:56 +0000 Files and hashes: 1: AS45493.roa (hash: rZ+bNzJQC/viqI5H1YlJtVUU+yt/vWuH3IoVopKxF0M=) 2: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: R2tqz+dEN8FmnzlPPAW37lJx9KAUz1JuZ6fFLWNKkZs=) 3: AS17451.roa (hash: gfkG2b1RdId9QfIc61bAbxF+GVRLF+QcRQ/dO1jIpRU=) 4: AS38060.roa (hash: OqAfMLCFfDQG+XhPjtqCPjbRL5lJ6IyCjhq4YPM/MQ8=) 5: AS38482.roa (hash: Xa228m03cC6BjrhAdtpooAsrClvDAQOyI7goiNY4/r4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 13:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:00:d4:34:ec:19:2c:3b:65:7b:b5:ad:6e:a8:b5:b8:ae:90:a3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF Validity Not Before: Feb 1 11:36:56 2026 GMT Not After : Feb 4 13:06:56 2026 GMT Subject: CN=2CDDF30019BFF424FEDE6059DF8923E4393CFD6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:b2:ae:6c:20:55:5e:9a:14:78:2b:34:fc: 39:ad:b8:d8:74:db:5c:77:5d:a0:d8:79:38:cf:ae: 47:ee:ba:60:f6:40:02:32:60:29:9e:1a:82:1d:3e: 1a:12:73:bf:89:64:7c:c5:57:5b:69:f8:7a:3e:ec: fc:ff:54:b3:cb:29:f8:e2:85:16:4a:50:4e:eb:54: db:c7:6d:d0:f5:ed:21:61:0b:a4:32:a2:9d:d5:24: 6c:bc:82:2d:98:a0:10:b9:85:bb:04:1e:f5:43:61: 6c:1d:77:b4:c3:0f:3d:56:5e:ab:0e:af:af:33:90: 7e:9a:a6:68:4f:66:4a:29:b4:84:c6:81:dc:ef:d9: 60:bd:90:eb:15:ff:5b:2b:f8:5a:f4:82:71:4e:68: 24:da:2d:6f:04:74:19:30:7b:fc:57:34:67:bd:00: ef:9b:eb:86:76:fd:ec:32:22:98:fa:25:9c:97:e6: 87:dc:f3:e9:9a:5f:0f:c0:6a:a9:d0:7b:16:08:b1: e1:56:ee:cb:75:be:60:99:bc:56:b5:90:a5:2c:1f: 2f:0a:62:f8:f6:57:57:b2:94:93:e0:ba:b6:77:d5: 01:f8:6b:00:fd:44:34:8c:81:db:12:22:93:e8:ff: b2:fd:9e:76:c6:5c:48:99:fe:4c:2c:5c:20:3b:6e: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DD:F3:00:19:BF:F4:24:FE:DE:60:59:DF:89:23:E4:39:3C:FD:6D X509v3 Authority Key Identifier: keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b8:79:4d:fa:40:3d:51:43:a8:9f:2a:4f:59:50:5b:27:f5: d2:12:29:dd:78:69:20:96:a6:66:39:e1:17:8f:42:fd:c9:12: 47:e3:0a:f0:53:90:54:b3:ac:cc:ff:60:6e:e1:74:c3:ea:bb: 72:b6:44:69:db:15:56:3d:d4:10:c5:dc:de:62:50:a1:8c:14: 1f:dc:a4:f8:7a:ba:35:64:58:c2:d1:29:d9:e8:d7:e6:e9:5b: f2:9e:71:3b:7b:e2:87:fb:12:66:9a:a3:f5:f8:3f:a3:52:38: 33:df:84:6e:32:22:15:7e:26:08:af:40:ef:83:1a:03:0e:ba: ea:c8:ea:4d:f7:0c:7b:b2:4a:a9:04:e6:5a:bc:75:61:6e:d4: 72:24:3e:df:8b:f5:68:d1:b5:8f:5b:c6:87:c1:06:ea:64:77: b7:f6:eb:2f:55:c2:51:07:ce:62:aa:66:65:71:78:3b:ef:ac: 94:15:fe:d9:e3:d2:39:28:19:c7:aa:0c:34:c1:a2:09:14:7a: 06:01:f5:84:52:49:b7:bd:c4:a9:59:37:40:89:2f:1d:6f:ee: 5e:9e:1e:46:cd:63:66:00:fb:cc:dc:bd:6a:27:46:94:2d:10: f5:39:74:11:32:f2:74:c7:71:8c:d8:ea:22:17:6c:1e:f3:aa: a1:cf:af:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPADUNOwZLDtle7Wtbqi1uK6Qo/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3 RjcyOERCRjAeFw0yNjAyMDExMTM2NTZaFw0yNjAyMDQxMzA2NTZaMDMxMTAvBgNV BAMTKDJDRERGMzAwMTlCRkY0MjRGRURFNjA1OURGODkyM0U0MzkzQ0ZENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1frKubCBVXpoUeCs0/DmtuNh0 21x3XaDYeTjPrkfuumD2QAIyYCmeGoIdPhoSc7+JZHzFV1tp+Ho+7Pz/VLPLKfji hRZKUE7rVNvHbdD17SFhC6Qyop3VJGy8gi2YoBC5hbsEHvVDYWwdd7TDDz1WXqsO r68zkH6apmhPZkoptITGgdzv2WC9kOsV/1sr+Fr0gnFOaCTaLW8EdBkwe/xXNGe9 AO+b64Z2/ewyIpj6JZyX5ofc8+maXw/AaqnQexYIseFW7st1vmCZvFa1kKUsHy8K Yvj2V1eylJPgurZ31QH4awD9RDSMgdsSIpPo/7L9nnbGXEiZ/kwsXCA7bq5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULN3zABm/9CT+3mBZ34kj5Dk8/W0wHwYDVR0j BBgwFoAUrFVUR7piw5EH8Wv1cvgqQX9yjb8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC9BQzU1NTQ0N0JB NjJDMzkxMDdGMTZCRjU3MkY4MkE0MTdGNzI4REJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3Rjcy OERCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB NDE3RjcyOERCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGG4eU36QD1RQ6ifKk9ZUFsn9dISKd14aSCW pmY54RePQv3JEkfjCvBTkFSzrMz/YG7hdMPqu3K2RGnbFVY91BDF3N5iUKGMFB/c pPh6ujVkWMLRKdno1+bpW/KecTt74of7Emaao/X4P6NSODPfhG4yIhV+JgivQO+D GgMOuurI6k33DHuySqkE5lq8dWFu1HIkPt+L9WjRtY9bxofBBupkd7f26y9VwlEH zmKqZmVxeDvvrJQV/tnj0jkoGceqDDTBogkUegYB9YRSSbe9xKlZN0CJLx1v7l6e HkbNY2YA+8zcvWonRpQtEPU5dBEy8nTHcYzY6iIXbB7zqqHPr8E= -----END CERTIFICATE-----Generated at Mon Feb 2 14:26:59 2026 by rpki-client